Senior Application Security Engineer jobs in United States
info-icon
This job has closed.
company-logo

Quantum World Technologies Inc. · 2 days ago

Senior Application Security Engineer

Quantum World Technologies Inc. is seeking a Senior Application Security Engineer to enhance their security measures. The role involves identifying and remediating vulnerabilities, integrating security tools within CI/CD pipelines, and collaborating with development teams to enforce secure coding standards.

ConsultingHuman ResourcesInformation TechnologyStaffing Agency
Hiring Manager
Akhil Singh
linkedin

Responsibilities

Ability to identify, triage, and remediate issues such as injection flaws, insecure deserialization, and misconfigurations
Integrate and manage SAST and DAST tools within CI/CD pipelines
Collaborate with development teams to remediate vulnerabilities and enforce secure coding standards
Design and implement guardrails for AI-powered applications, mitigating risks like prompt injection, model inversion, and data poisoning
Develop and maintain security policies, procedures, and documentation
Conduct security assessments and provide actionable recommendations
Analyze complex problems and implement effective solutions or workarounds
Mentor junior engineers and promote security awareness across teams
Build and maintain CI/CD pipelines using tools like CloudBees, Jenkins, Buddy, UrbanCode, etc
Develop automation solutions using Python, Java, or PowerShell
Work with APIs, endpoints, and databases to develop integrated security solutions
Use IDEs such as Visual Studio, Visual Studio Code, Eclipse for secure development and debugging
Implement and manage GitHub Advanced Security features including code scanning, secret scanning, and Dependabot alerts
Apply extensive experience working with DevOps tools such as GitHub, including workflows, actions, and advanced workflow automation
Understand and remediate security vulnerabilities across multiple programming languages
Work with Azure Resource Manager (ARM) and scripting tools including PowerShell, Azure CLI, JavaScript, Shell scripts, Python, or similar
Collaborate within an Agile team environment using Azure DevOps
Familiarity with OWASP Dependency-Check and similar tools to manage third-party risks

Qualification

Application SecurityVulnerability ManagementPythonJavaPowerShellSAST toolsDAST toolsCompTIA Security+OWASP Top 10Cloud-native securityAnalytical skillsCommunication skillsTeam collaboration

Required

Minimum 5+ years of experience in application security or software engineering with a security focus
Strong programming skills in one or more languages (e.g., Python, Java, JavaScript, C#)
At least 3 years of experience developing automation solutions using Python, Java, or PowerShell

Preferred

Hands-on experience with SAST and DAST tools (e.g., Veracode, GitHub)
Deep understanding of security vulnerabilities in multiple programming languages (e.g., Python, Java, JavaScript, C#)
Solid understanding of OWASP Top 10 and familiarity with SANS Top 25 vulnerabilities
Experience with AI security concepts and mitigation strategies
CompTIA Security+ certification or equivalent
Experience with cloud-native security (AWS, Azure, GCP)
Experience developing solutions that combine data from APIs, endpoints, and databases
Outstanding communication and strong analytical skills
Ability to function effectively in a globally diverse work environment
Clearly communicates risks, solutions, and security posture to technical and non-technical stakeholders
Experience with GenAI risk mitigation (e.g., prompt injection, data leakage)
Knowledge of container security and infrastructure-as-code scanning
Certifications such as CISSP, OSCP, or GIAC are a plus

Company

Quantum World Technologies Inc.

twittertwittertwitter
company-logo
QUANTUM WORLD TECHNOLOGIES INC, is a IT Consulting and Staffing venture of QUANTUM GROUP OF COMPANIES having its presence in IT and I.T.E.S, Real Estate, Hospitality, Pharmaceuticals, and Entertainment Industries across the globe, with its headquarters in Los Alamitos CA, Parsippany – NJ, Seattle – WA, Canada, Dubai and India.

Funding

Current Stage
Late Stage

Leadership Team

A
Ashish Srivastava
Managing Director
linkedin
Company data provided by crunchbase